M48: harden demo operations and offsite recovery

2026-08-21 22:17:49 +02:00
parent a24098c583
commit 00191e9b54
28 changed files with 1136 additions and 332 deletions
@@ -15,8 +15,10 @@ retention values. Operations Managers are the only role permitted to export or a
 - Audit events are configured for 2,555 days by default. They are immutable operational
  evidence; changing this period requires legal approval and a separate, audited purge
  implementation. MobilityOps reports the policy but never silently deletes audit data.
- Database backups default to 30 days with at least seven newest recovery points. A
-  configured secondary mount must follow the same policy.
+- Database backups default to 30 days with at least seven newest recovery points. The demo's
+  optional OneDrive off-site copy contains the same synthetic dataset and follows the same
+  retention intent; remove that folder when retiring the demo. Real personal data remains
+  out of scope and must not be introduced merely because cloud backup is available.
 - Logs are bounded by Docker rotation. They must not contain request bodies, passwords,
  OIDC tokens or customer fields.